1/6 



FIG. 1 



WAN 




LAN 



30 

L 

GATEWAY 



TERMINAL 
DEVICE 




40 



TERMINAL 
DEVICE 



50 



2/6 



o 

OCT 



co" 



cow 

CO QC 
LULU 

co. 

qO : 
<o: 



co" 



CO 



ULl 




UjO 

9 if 




CO cc 




LAN- 
INTE 


UNI! 



CO 
CD- 
CO 



LU 



CD 
CO < ; 



O 
DC 



o 
o 

CO 
CO 
LU 

o 

O 
< 





1 CM 

CD 


CO 


CO 












O 


i :z: 






ZD 




/*\ A 

CA 


CO 




h- 


CO 






>s 




LU 1 








< 




Efc: 








< 







CO 



LU 

o 
< 

co : 



CO 

co 



LU 
LU O 

ZUil 



Y 



3/6 



FIG. 3 



(start) 



RECEIVE A SERVICE ACCESS 
REQUEST MESSAGE FROM 
THE WAN-SIDE INTERFACE UNIT 



X 



S1 



AUTHENTICATE THE 
DEVICE THAT SENT 
THE SERVICE ACCESS 
REQUEST MESSAGE? 



YES 



S2 



NO 



DISPOSE OF THE SERVICE 
ACCESS PERMISSION 
MESSAGE 



S3 



NEWLY CREATE AN ACCESS 
PERMISSION ENTRY FROM 
INFORMATION WRITTEN IN 
THE SERVICE ACCESS 
PERMISSION MESSAGE 



S4 



ADD THE NEWLY GENERATED 
ACCESS PERMISSION ENTRY 
TO THE ACCESS PERMISSION 
LIST 



S5 



( END ) 



FIG. 4 



ASIP 


131.113.82.1 


ADIP 


210.139.255.223 


ASPT 


20010 


ADPT 


5000 


LATM 


21 : 10 : 10 



4/6 



FIG. 5 



(start) 



RECEIVE A DATA PACKET 
FROM THE WAN-SIDE 
NETWORK INTERFACE 



X 



SS1 



PERMIT THE PASSAGE oco 
.OF THE DATA PACKET -> b2 
<ClN VIEW OF INDIVIDUAL 



ACCESS PERMISSION 
ENTRIES?>^^- 

YES 




NO 



DISPOSE OF THE 
DATA PACKET 



SS3 



STORE THE CURRENT TIME 
IN THE LAST ACCESS 
PERMISSION TIME FIELD OF 
AN APPLICABLE ACCESS 
PERMISSION ENTRY 



SS4 



TRANSFER THE DATA PACKET 
TO THE ADDRESS 
CONVERSION UNIT (WHICH 
IN TURN SENDS IT TO THE 
LAN-SIDE NETWORK INTER- 
FACE UNIT AFTER ADDRESS 
CONVERSION) 


SS5 


> 






f 



( END ) 



5/6 



FIG. 6 



(start) 



READ A VALUE OF THE SP1 
LAST ACCESS PERMISSION 
TIME FIELD FROM THE 
ACCESS PERMISSION ENTRY 



< 



SP2 

THE DIFFERENCES 
BETWEEN THE CURRENT 
TIME AND THE LAST 
PERMISSION TIME FIELD 
VALUE SMALLER THAN 
THE THRESHOLD TIME? 



NO 



DELETE THE ACCESS 
PERMISSION ENTRY FROM 
THE ACCESS PERMISSION 
LIST 



SP3 




YES 



LEAVE THE ACCESS 
PERMISSION ENTRY 
UNPROCESSED 



SP4 



( END ) 



6/6 



FIG. 7 



(start) 



RECEIVE A DATA PACKET 
FROM THE WAN-SIDE 
INTERFACE UNIT 



SQ1 





ACCESS 
TERMINATION 
INFORMATION 



^CONTA 


INED? 
YES 

f 


DELETE THE APPLICABLE 
ACCESS PERMISSION 
ENTRY FROM THE ACCESS 
PERMISSION LIST 


> 


f 



PROCESS THE 
DATA PACKET 
NORMALLY 



( END ) 



SQ4 



( END ) 



